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IN THE CLAIMS: 

The current claims follow. For claims not marked as amended in this response, any 
difference in the claims below and the previous state of the claims is unintentional and in the nature 
of a typographical error. 

1. (Currently Amended) A router for interconnecting external devices coupled to said 
router, said router comprising: 
a switch fabric; and 

a plurality of routing nodes coupled to said switch fabric, wherein each of said plurality of 
routing nodes comprises: 

a first network processor comprising a first plurality of microengines, each of said 
first plurality of microengines for performing first security and classification functions associated 
with data packets received from said external devices and transmitted to said switch fabric, wherein 
each data packet is distributed to a selected microengine; 

a second network processor comprising a second plurality of microengines, each of 
said second plurality of microengines for performing second security and classification functions 
associated with data packets received from said switch fabric and transmitted to said external 
devices, wherein each data packet is distributed to a selected microengine; and 

a routing table search circuit comprising an initial content addressable memory stage 
followed by a plurality of trie tree search table stages, wherein one of said first and second security 
and classification functions is performed according to information from the routing table search 
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ei feuit. circuit, 

wherein the routing table search circuit is configured to: 

build a content addressable memory search key prior to the initial content addressable 
memory stage, wherein the content addressable memory search key is built from a portion of a 
destination address and a class of service (CoS) value; and 

form an index from a result of the initial content addressable memory stage prior to 
the plurality of trie tree search table stages, wherein the index points to a start of a trie tree search 
table. 

2. (Previously Presented) The router as set forth in Claim 1 wherein said first and 
second security and classification functions comprise replacing a source address associated with 
header information of a first data packet with an address selected from a pool of router addresses 
associated with said router. 

3 . (Previously Presented) The router as set forth in Claim 1 wherein said first and 
second security and classification functions comprise filtering a first data packet based on at least one 
of: 1) a Layer 2 address associated with said first data packet; 2) a Layer 3 address associated with 
said first data packet; and 3) a traffic type associated with said first data packet. 
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4. (Previously Presented) The router as set forth in Claim 1 wherein said first and 
second security and classification functions comprise filtering a first data packet based on at least one 
of: 1) a Layer 4 address associated with said first data packet; and 2) a class of service (CoS) value 
associated with said first data packet, 

5. (Previously Presented) The router as set forth in Claim 1 wherein said first and 
second security and classification functions comprise performing a Network Address Translation 
(NAT) function to provide subnet independence. 

6. (Original) The router as set forth in Claim 1 wherein a first one of said first 
plurality of microengines is capable of executing N threads, wherein each of said N threads performs 
at least one security and classification function. 

7. (Original) The router as set forth in Claim 6 wherein a first one of said second 
plurality of microengines is capable of executing M threads, wherein each of said M threads 
performs at least one security and classification function. 

8-9. (Cancelled) 
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10, (Currently Amended) A communication network comprising a plurality of routers 
that communicate data packets to one another and to interfacing external devices, each of said 
plurality of routers comprising: 

a switch fabric; and 

a plurality of routing nodes coupled to said switch fabric, wherein each of said plurality of 
routing nodes comprises: 

a first network processor comprising a first plurality of microengines, each of said 
first plurality of microengines for performing first security and classification functions associated 
with data packets received from said external devices and transmitted to said switch fabric, wherein 
each data packet is distributed to a selected microengine; 

a second network processor comprising a second plurality of microengines, each of 
said second plurality of microengines for performing second security and classification functions 
associated with data packets received from said switch fabric and transmitted to said external 
devices, wherein each data packet is distributed to a selected microengine; and 

a routing table search circuit comprising an initial content addressable memory stage 
followed by a plurality of trie tree search table stages, wherein one of said first and second security 
and classification functions is performed according to information from the routing table search 
circuit circuit, 

wherein the routing table search circuit is configured to: 

build a content addressable memory search key prior to the initial content addressable 
memory stage, wherein the content addressable memory search key is built from a portion of a 
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destination address and a class of service (CoS) value; and 

form an index from a result of the initial content addressable memory stage prior to 
the plurality of trie tree search table stages, wherein the index points to a start of a trie tree search 
table. 

1 1. (Previously Presented) The communication network as set forth in Claim 10 
wherein said first and second security and classification functions comprise replacing a source 
address associated with header information of a first data packet with an address selected from a pool 
of router addresses associated with said router. 

12. (Previously Presented) The communication network as set forth in Claim 10 
wherein said first and second security and classification functions comprise filtering a first data 
packet based on at least one of: 1) a Layer 2 address associated with said first data packet; 2) a Layer 
3 address associated with said first data packet; and 3) a traffic type associated with said first data 
packet. 

13. (Previously Presented) The communication network as set forth in Claim 10 
wherein said first and second security and classification functions comprise filtering a first data 
packet based on at least one of: 1) a Layer 4 address associated with said first data packet; and 2) a 
class of service (CoS) value associated with said first data packet 
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14, (Previously Presented) The communication network as set forth in Claim 10 
wherein said first and second security and classification functions comprise performing a Network 
Address Translation (NAT) function to provide subnet independence. 

15. (Original) The communication network as set forth in Claim 10 wherein a first 
one of said first plurality of microengines is capable of executing N threads, wherein each of said N 
threads performs at least one security and classification function, 

16, (Original) The communication network as set forth in Claim 15 wherein a first 
one of said second plurality of microengines is capable of executing M threads, wherein each of said 
M threads performs at least one security and classification function. 

17. -18. (Cancelled). 
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1 9 . (Currently Amended) For use in a router comprising a switch fabric and a plurality of 
routing nodes coupled to the switch fabric, each of the routing nodes for transmitting data packets to, 
and receiving data packets from, external devices and transmitting data packets to, and receiving data 
packets from, other routing nodes via the switch fabric, a method comprising the steps of: 

performing routing table searching using an initial content addressable memory stage 
followed by a plurality of trie tree search table stages; 

performing first security and classification functions in a first network processor comprising a 
first plurality of microengines, each of said first plurality of microengines capable of executing said 
first security and classification functions, wherein the first network processor processes data packets 
being transmitted from the external devices to the switch fabric, and wherein each data packet is 
distributed to a selected microengine; and 

performing second security and classification functions in a second network processor 
comprising a second plurality of microengines, each of the second plurality of microengines capable 
of executing the second security and classification functions, wherein the second network processor 
processes data packets being transmitted from the switch fabric to the external devices, and wherein 
each data packet is distributed to a selected microengine, 

wherein one of said first and second security and classification functions is performed 
according to a result of the step of performing the routing table searching, searching, and 

wherein performing routing table searching comprises: 

building a content addressable memory search key prior to the initial content 
addressable memory stage, wherein the content addressable memory search key is built from a 
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portion of a destination address and a class of service (CoS) value; and 

forming an index from a result of the initial content addressable memory stage prior to 
the plurality of trie tree search table stages, wherein the index points to a start of a trie tree search 
table. 

20. (Previously Presented) The method as set forth in Claim 1 9 wherein the first 
and second security and classification functions comprise replacing a source address associated with 
header information of a first data packet with an address selected from a pool of router addresses 
associated with the router. 

2 1 . (Previously Presented) The method as set forth in Claim 1 9 wherein the first 
and second security and classification functions comprise filtering a first data packet based on at least 
one of : 1) a Layer 2 address associated with the first data packet; 2) a Layer 3 address associated with 
the first data packet; and 3) a traffic type associated with the first data packet. 

22. (Previously Presented) The method as set forth in Claim 19 wherein the first 
and second security and classification functions comprise filtering a first data packet based on at least 
one of: 1) a Layer 4 address associated with the first data packet; and 2) a class of service (CoS) 
value associated with the first data packet. 
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23 . (Previously Presented) The method as set forth in Claim 19 wherein the first 
and second security and classification functions comprise performing a Network Address Translation 
(NAT) function to provide subnet independence. 



24. (Canceled) 
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